Secretariat
Secretariat follows the cases: cybercrime busts, scam-compound takedowns, arrests, and enforcement actions, from Indian state cyber cells to the betting and trafficking networks of Southeast Asia.
Ministry of Cyber Affairs writers publish under pseudonyms. Our editorial model.
How can cybercriminals weaponise House Hold Income based advertisement targeting of Meta
Income is one of the most powerful qualifiers for fraud, which is exactly why a reliable income filter is valuable — and risky. For a scammer it means higher return on ad spend.
India’s mule SIM trade: UP Police arrest man for selling SIMs activated with stolen biometrics
Police in Sitapur, Uttar Pradesh, have arrested a man accused of misusing a point-of-sale agent ID and people’s biometrics to activate SIM cards in their names and sell them on. Officers seized 25 SIM cards, five phones and a motorcycle. Such “mule SIMs” hide the real user and are widely used in cyber fraud.
India’s busts online gaming betting scam ring; Mahadev, Lotus, MY99 apps used
India’s UP Police have arrested two people and placed one juvenile under watch in an alleged online gaming and betting fraud that used fake social media ads, WhatsApp and WATI groups, and sites including Mahadev Game, Lotus Game, MY99 and MY REDDY 99. Officers seized ₹15 lakh in cash and digital evidence of crores in transactions.
16 arrested in Timor Leste for transnational Japanese law enforcement impersonation scam
Timor-Leste investigators raided a building in Dili used to run telecom scams and detained 16 people, including seven Japanese and six Chinese nationals. A fake Japanese police uniform, a staged police backdrop and a Japanese-language fraud manual were found. The group allegedly posed as Japanese police to target people in Japan.
Pakistan’s NCCIA raids Lahore call centre posing as medical billing firm Mediknocx to target Canadians
Pakistan’s National Cyber Crime Investigation Agency says it raided an alleged illegal call centre in Lahore that used the medical billing brand Mediknocx as a front to defraud people in Canada. Officers seized 15 laptops, 50 mobile phones and 50 computer systems. No arrest figure has been released.
Pakistan’s NCCIA Lahore arrests 38 in Faisal Town and Johar Town scam centre raids • Foreign Nationals Targeted
NCCIA Lahore detained more than three dozen people in raids on alleged illegal call centres in Faisal Town and Johar Town, the agency said on 4 October 2026. The lineup photo shows 38 people besides three officers. The centres allegedly targeted people abroad with fake mobile upgrades and network packages, using dial-up software.
Gay Dating App Scam: How Criminals Turn Online Dating into a Trap
Wathoda police arrested Antariksh Mishra, 19, and Amit Patil, 23, after a 27-year-old hospital technician was allegedly lured through a gay dating app to an isolated spot near Bahadura Phata, threatened with a knife and robbed at an ATM, Lokmat Samachar reported on 4 October 2026. The case is a dating-app contact that moved offline into extortion.
India demonstrates its first 5.56 km free-space quantum key link, from BISAG-N to IIT Gandhinagar
India has demonstrated its first free-space quantum key distribution link, 5.56 km between BISAG-N and IIT Gandhinagar, PIB said on 3 October 2026. QNu Labs’ Armos system held the error rate under 5 percent and produced keys at 230–260 bits per second, which BISAG-N’s Vedic Kavach platform used to encrypt and decrypt test messages.
NeGD invites AI Engineers and a Senior Data Scientist under Digital India, last date 15 October
Digital India has flagged National e-Governance Division openings for AI Engineer and Senior Data Scientist, with applications closing on 15 October 2026. The hiring graphic lists two AI Engineer posts (5–9 years) and one Senior Data Scientist post (6–10 years). Apply at ora.digitalindiacorporation.in; full terms are on negd.gov.in and dic.gov.in.
Cybercriminals using FUD (Fully Undetectable) crypter services for malwares: Interpol Report
INTERPOL's Industrialization of Cybercrime report uses FUD once, as Fully Undetectable: crypter, packer, and anti-detection services sold so malware looks clean to antivirus and endpoint tools. Vendors re-wrap files, test them until scanners report them clean, and sell that result per test or by monthly subscription, often with proxies, VPNs, and anti-detect browsers. The report gives no FUD price, volume, or named product.
CISA opens 7 USAJOBS vacancies including cybersecurity technical writer and regional leadership roles
The U.S. Cybersecurity and Infrastructure Security Agency is accepting applications for seven federal vacancies on USAJOBS, spanning cybersecurity writing, data analysis, emergency communications, foreign investment risk, training, and regional leadership. Most listings close on 6 October 2026; candidates should apply via USAJOBS before the stated deadlines.
Threat analysis: Google Sites phishing that fools password managers via sites.google.com
Threat analysis of a Google Sites phishing kit reported by @VincentBounce: spoofed Google ‘app password / security alert’ mail, landing on sites.google.com/view/delete-new-app with CAPTCHA theatre, credential forms that trigger password-manager autofill, and mailed-by fwd.privateemail.com instead of Google bounce hosts. Includes IOCs and defender checklist.